]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
gstreamer1.0: ignore CVE-2025-2759
authorPeter Marko <peter.marko@siemens.com>
Thu, 25 Sep 2025 14:05:06 +0000 (16:05 +0200)
committerSteve Sakoman <steve@sakoman.com>
Thu, 25 Sep 2025 14:56:16 +0000 (07:56 -0700)
commit99ee1df6bde2ffd4fa2ddea44c0a9b94d9d77bae
tree233634a58c491e22dbe1285ee97ed87edcafce69
parent20dd654a8e66ffb1cac97958547f54a52ebd587d
gstreamer1.0: ignore CVE-2025-2759

Copy statement from [1] that it is problem of installers (non-Linux).
Also [2] linked in NVD says "Fixed in 1.25.1 Gstreamer Installer".
Since Yocto builds from sources into our own packages, ignore it.

[1] https://security-tracker.debian.org/tracker/CVE-2025-2759
[2] https://www.zerodayinitiative.com/advisories/ZDI-25-268/

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-multimedia/gstreamer/gstreamer1.0_1.24.13.bb